2018-05-29 21:07:40 +00:00
|
|
|
---
|
2020-09-01 15:14:13 +00:00
|
|
|
layout: commands
|
2020-04-07 18:55:19 +00:00
|
|
|
page_title: 'Commands: Intention Check'
|
2020-04-13 18:40:26 +00:00
|
|
|
sidebar_title: check
|
2018-05-29 21:07:40 +00:00
|
|
|
---
|
|
|
|
|
|
|
|
|
|
# Consul Intention Check
|
|
|
|
|
|
|
|
|
|
Command: `consul intention check`
|
|
|
|
|
|
|
|
|
|
The `intention check` command checks whether a connection attempt between
|
|
|
|
|
two services would be authorized given the current set of intentions and
|
|
|
|
|
Consul configuration.
|
|
|
|
|
|
|
|
|
|
This command requires less ACL permissions than other intention-related
|
|
|
|
|
tasks because no information about the intention is revealed. Therefore,
|
|
|
|
|
callers only need to have `service:read` access for the destination. Richer
|
2020-04-09 23:46:54 +00:00
|
|
|
commands like [match](/docs/commands/intention/match) require full
|
2018-05-29 21:07:40 +00:00
|
|
|
intention read permissions and don't evaluate the result.
|
|
|
|
|
|
|
|
|
|
## Usage
|
|
|
|
|
|
|
|
|
|
Usage: `consul intention check [options] SRC DST`
|
|
|
|
|
|
2020-06-26 21:59:15 +00:00
|
|
|
`SRC` and `DST` can both take [several forms](/docs/commands/intention#source-and-destination-naming).
|
|
|
|
|
|
2018-05-29 21:07:40 +00:00
|
|
|
#### API Options
|
|
|
|
|
|
2020-04-07 18:55:19 +00:00
|
|
|
@include 'http_api_options_client.mdx'
|
2018-05-29 21:07:40 +00:00
|
|
|
|
2020-06-26 21:59:15 +00:00
|
|
|
#### Enterprise Options
|
|
|
|
|
|
|
|
|
|
@include 'http_api_namespace_options.mdx'
|
|
|
|
|
|
2018-05-29 21:07:40 +00:00
|
|
|
## Examples
|
|
|
|
|
|
2020-05-19 18:32:38 +00:00
|
|
|
```shell-session
|
2018-05-29 21:07:40 +00:00
|
|
|
$ consul intention check web db
|
|
|
|
|
Denied
|
|
|
|
|
|
|
|
|
|
$ consul intention check web billing
|
|
|
|
|
Allowed
|
|
|
|
|
```
|
